Re: iso 17799

[Bennett Todd <bet () rahul net>]

2004-07-13T14:48:27 avraham shir-el (arthur sherman):
> i've seen lots on this list about best practices w/o
> any refrences to 17799.

"Best Practices".

Anytime you hear someone using the phrase in the context of computer
security, if they're not condemning the phrase itself, you should
put your hand on your wallet to make sure they've not already lifted
it, and leave immediately.

"Best practices" is a phrase that carries some strong connations
of respectibility; the professionals who design and document best
practices in financial management and reporting have a lot of
credibility.

Maybe when computer science is as mature as finance, in a couple of
thousand years or so, best practices will be a meaningful and
valuable concept here as well.

At the moment, though, sales weasles use it to try to paint a lustre
of respectibility on whatever they're trying to sell at the moment.

-Bennett

Attachment: _bin
Description: